Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4WXiYQLs1LriDDtz6T4hNxWZEnE.cer
File: 4WXiYQLs1LriDDtz6T4hNxWZEnE.cer (raw, json)
Hash identifier: 5F58mmB2KIS/+oHmdZ6fcdbEnQdlrmMopFYg6iVRb4E=
Subject key identifier: E1:65:E2:61:02:EC:D4:BA:E2:0C:3B:73:E9:3E:21:37:15:99:12:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F09411687D11584952F36D64F49BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199763
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:09:41:16:87:d1:15:84:95:2f:36:d6:4f:49:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e165e26102ecd4bae20c3b73e93e213715991271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:ea:d5:1c:10:a3:45:da:f4:49:fc:f2:5d:
e9:89:ff:17:ad:8f:9b:a9:6c:58:86:21:2c:c6:78:
47:6f:67:ac:e4:47:25:54:1c:9d:b7:19:52:56:4a:
44:22:f2:bc:1f:9a:f4:28:7f:cb:65:81:03:29:1e:
7b:8e:f6:34:24:82:88:6e:07:5f:78:82:99:da:38:
c2:b8:ab:56:4d:ef:62:6f:25:8c:8d:0b:ac:1f:d8:
3f:a3:e0:08:8e:40:d8:f1:34:7a:5b:4a:da:3d:c1:
76:43:1b:ce:a2:53:c0:78:8b:be:1c:60:98:97:22:
a4:0b:a3:d3:eb:fe:0b:61:c4:0a:df:22:25:3d:19:
11:00:45:f2:4e:e6:fb:66:f7:4a:9e:3e:7f:cd:d1:
00:d6:02:18:34:28:0e:ff:5a:6d:64:76:39:ce:59:
b2:c8:cc:b9:c2:b9:68:bd:66:a8:2f:6b:de:fb:d6:
82:82:1e:bf:9b:7d:78:67:67:e6:94:8e:7a:1e:87:
3e:c5:ac:54:c4:77:4e:c6:c0:59:29:cc:85:5f:52:
da:0a:8a:3a:f1:6e:8d:ad:ce:fe:26:74:43:a0:de:
9a:ea:3f:31:11:35:32:0e:97:02:9b:58:7e:aa:0d:
0d:43:ae:8f:01:fb:11:d6:78:d2:65:63:53:ca:7e:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:65:E2:61:02:EC:D4:BA:E2:0C:3B:73:E9:3E:21:37:15:99:12:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c9efb-cba8-4940-9259-2cd3d6eba969/1/4WXiYQLs1LriDDtz6T4hNxWZEnE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199763
Signature Algorithm: sha256WithRSAEncryption
61:02:aa:57:4e:d0:45:04:d7:29:f5:50:fd:23:b3:0d:55:97:
8e:30:d0:89:0a:e1:8d:bf:07:0c:fb:d9:16:2b:44:fc:7e:dd:
2c:07:6e:d2:37:93:c5:30:4c:81:aa:63:48:23:f0:0c:c6:e3:
d5:a2:29:26:bb:e6:3c:0d:42:9e:97:92:1a:cb:85:12:74:bd:
9d:96:d2:f9:41:48:1a:14:57:93:0e:21:2c:5e:3d:81:4f:0b:
91:d7:95:09:3a:b4:86:2b:2d:ec:bd:70:22:1e:e5:79:2b:41:
4b:f4:43:2d:d2:e4:92:2a:15:15:58:73:f0:3e:61:ca:e1:04:
4d:3f:f6:77:61:43:14:d3:f1:91:35:b8:24:5e:42:c7:f8:69:
ad:b3:8a:84:ae:9c:56:42:b1:19:43:3f:61:f6:aa:b0:47:f1:
2d:d4:ef:36:57:51:1c:49:d4:c7:b2:8b:bd:00:c6:3a:f6:a0:
38:83:26:86:4f:c7:a8:40:5f:27:91:74:59:83:de:55:f1:90:
25:ec:8c:da:c3:b1:ed:b7:6d:bd:a9:f2:59:f4:1a:66:89:65:
cd:4f:90:03:45:5d:dd:fb:79:f7:19:83:aa:42:c0:00:fb:64:
60:4f:6a:84:80:91:84:b9:55:fa:8a:f1:22:88:85:f3:10:9d:
cb:8c:a6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:39:40 2025 by rpki-client